New Brute Force Attacks Exploiting XMLRPC in WordPress
Daniel Cid Brute force attacks against WordPress have always been very common. In fact, Brute Force attacks against any CMS these days is a common occurrence, what…
MailPoet Vulnerability Exploited in the Wild – Breaking Thousands of WordPress Sites
A few weeks ago we found and disclosed a serious vulnerability on the MailPoet WordPress Plugin. We urged everyone to upgrade their sites immediately due…
SQL Injection Vulnerability – vBulletin 5.x
The vBulletin team just released a security patch for vBulletin 5.0.4, 5.0.5, 5.1.0, 5.1.1, and 5.1.2 to address a SQL injection vulnerability on the member…
Website Malware – Mobile Redirect to BaDoink Porn App
A few weeks ago we reported that we were seeing a huge increase in the number of websites compromised with a hidden redirection to pornographic…
Ask Sucuri: Who is Logging into My WordPress Site?
Today, we’re going to revisit our Q&A series. If you have any questions about malware, blacklisting, or security in general, send them to us at:…
Remote File Upload Vulnerability in WordPress MailPoet Plugin (wysija-newsletters)
Marc-Alexandre Montpas, from our research team, found a serious security vulnerability in the MailPoet WordPress plugin. This bug allows an attacker to upload any file…
TimThumb WebShot Code Execution Exploit (Zeroday)
If you are still using Timthumb after the serious vulnerability that was found on it last year, you have one more reason to be concerned.…
Spam Hack Targets WordPress Core Install Directories
Do you run your website on WordPress? Have you checked the integrity of your core install lately for SPAM like “Google Pharmacy” stores or other…
CloudProxy + SPDY = A Faster Website
Our Website Firewall already protects and speeds up over 1,000 websites. Now, it’ll be even faster. We’re happy to announce that we just added support…
Website Firewall Update – Introducing 2FA and More
Today we are launching the new and improved Protected Page capability in our Website Firewall. It allows for a simple (1-click) activation of secondary authentication…
BaDoink Website Redirect – Malicious Redirections to Porn Websites on Mobile Devices
The past week has brought about a large number of cases where compromised websites had hidden redirections to porn injected into their code. All the…